
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json)
Hash identifier: JBuCS1LcRRRE/BdT3HC1jNnJMlJad2oybZubRma3Ig0=
Subject key identifier: 23:26:13:DB:2C:6E:84:39:18:76:4C:FF:DC:05:1E:C2:CE:57:5D:1F
Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
Manifest number: 01DB
Signing time: Mon 21 Sep 2026 03:38:01 +0000
Manifest this update: Mon 21 Sep 2026 03:38:01 +0000
Manifest next update: Mon 28 Sep 2026 03:38:01 +0000
Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: vxQ+CXWY3QU+jHY+3o/JZvL8/r3mD90gbUPtiHmVdH8=)
2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: 5PHbUM/X+Td9kzCJHVRsM26TQZj90GItMYtQ/V/nVug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Validity
Not Before: Sep 21 03:38:01 2026 GMT
Not After : Sep 28 03:38:01 2026 GMT
Subject: CN=6ab0a699-d90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:5e:67:46:b5:bb:35:4d:f0:b8:31:23:d2:
b9:ed:ca:f7:8a:67:03:da:b3:b4:e1:38:3f:dc:0e:
7f:9a:89:11:2d:45:8f:e3:48:08:56:45:11:32:47:
ed:07:ee:cc:76:44:7f:ca:20:b0:6d:48:2c:2b:e1:
93:40:c6:5a:ab:26:ec:77:73:46:44:d2:e3:23:b7:
fb:26:fb:2b:83:2d:26:23:36:69:d9:09:82:1e:3f:
2e:c6:69:77:af:db:1b:4d:47:d0:05:9c:9b:88:3d:
69:01:05:6a:bc:26:48:a6:e9:0f:85:e7:f6:26:fd:
97:30:07:ea:4b:78:85:2c:3d:13:e2:30:08:78:b1:
bc:20:e1:46:a2:af:6c:02:27:72:87:1b:48:10:d8:
96:eb:55:ce:37:ba:7d:d6:4b:6d:79:1b:d6:7e:f2:
e6:dc:7e:4c:18:0f:59:0f:6b:d3:2e:2e:03:fe:40:
3b:20:36:41:91:7a:dd:e4:a6:fc:5f:4a:3b:1b:d8:
eb:29:2a:83:01:fe:a4:25:13:6e:00:89:37:ef:e1:
28:fa:78:5d:f3:58:da:76:55:83:1d:ba:dc:12:9c:
fd:cd:2d:76:04:0e:c5:33:b6:1b:96:af:ea:65:8f:
d7:a6:a9:d3:e8:6f:7b:67:5c:5f:99:f7:ea:37:6d:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:26:13:DB:2C:6E:84:39:18:76:4C:FF:DC:05:1E:C2:CE:57:5D:1F
X509v3 Authority Key Identifier:
keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:78:79:26:3e:52:0c:c7:16:50:cd:33:ef:45:80:78:07:b5:
6b:53:5c:a4:d4:9e:2f:1b:8c:9b:a6:89:4f:c1:ef:33:d2:11:
62:8b:70:98:0f:7a:2a:a5:d9:99:d1:bb:0e:a6:ff:00:0d:65:
7f:de:6c:40:e8:da:0d:be:0e:fc:39:e2:4e:9d:cf:db:3c:c4:
a4:21:63:b1:01:ed:03:a7:9b:e0:15:63:95:76:0a:1b:3f:a1:
48:67:ab:29:c1:ac:55:a8:68:b3:d3:25:8a:d9:c0:0c:76:dc:
5b:13:32:cf:f3:4b:83:d8:34:fc:94:55:a4:da:d7:e6:1b:38:
59:4e:57:d9:df:bf:73:b3:85:ea:37:80:2d:82:ee:b3:fe:bd:
94:d3:99:86:43:4e:5d:d8:e9:f0:08:37:a6:09:78:91:85:1e:
97:20:a4:bd:02:a7:3b:96:5a:34:8a:31:83:74:21:56:05:ea:
c1:d2:99:1a:21:fb:45:a2:61:cb:26:43:d7:4b:4d:84:54:8e:
23:3d:48:cb:c8:5d:f9:de:3d:01:75:f8:5c:29:b7:ac:8c:86:
94:22:8c:22:0e:10:3d:66:9c:82:ba:b7:b3:75:c4:38:be:a4:
29:6c:98:10:61:96:89:65:b1:aa:b4:ff:ae:f4:bf:47:d6:b7:
48:e0:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:32:38 2026 by rpki-client